How many CVEs does Grafana tempo have?

Grafana tempo has 3 published CVE records since 2026.

How many Grafana tempo CVEs are in CISA KEV?

None of Grafana tempo's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Are there public exploits for Grafana tempo vulnerabilities?

No Grafana tempo CVEs currently have a tracked public exploit in this dataset.

Which versions of Grafana tempo are affected?

67 distinct Grafana tempo versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Grafana tempo CVEs?

Grafana tempo's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-326 (Inadequate Encryption Strength).

What is the average severity of Grafana tempo CVEs?

The average CVSS base score across Grafana tempo's scored CVEs is 7.2.

Grafana tempo Vulnerabilities: CVEs, CISA KEV & Security Advisories

Affected versions and CVEs

Browse every Grafana tempo version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

2.10.03 CVEs
2.10.13 CVEs
1.3.02 CVEs
1.4.02 CVEs
1.4.0-rc.02 CVEs
1.5.02 CVEs
1.5.0-rc.02 CVEs
1.5.0-rc.12 CVEs
1.5.0-rc.22 CVEs
2.0.02 CVEs
2.0.0-rc.02 CVEs
2.1.0-rc.02 CVEs
2.2.0-rc.02 CVEs
2.3.0-rc.02 CVEs
2.4.02 CVEs
2.4.0-rc.02 CVEs
2.5.0-rc.02 CVEs
2.5.0-rc.12 CVEs
2.6.0-rc.02 CVEs
2.7.0-rc.02 CVEs
2.9.02 CVEs
2.9.12 CVEs
0.2.01 CVE
0.3.01 CVE
0.4.01 CVE
0.5.01 CVE
0.6.01 CVE
0.7.01 CVE
1.0.01 CVE
1.0.0-rc.01 CVE
1.1.01 CVE
1.1.0-rc.01 CVE
1.1.0-rc.11 CVE
1.2.01 CVE
1.2.0-rc.01 CVE
1.2.0-rc.11 CVE
1.3.0-rc.01 CVE
2.10.0-rc.01 CVE
2.10.21 CVE
2.8.01 CVE
2.8.0-rc.01 CVE
2.8.0-rc.11 CVE
2.8.11 CVE
2.8.21 CVE
2.8.31 CVE
2.9.0-rc.01 CVE

Version ranges

2.10.0 <= v < 2.10.22 CVEs
2.9.0 <= v < 2.9.22 CVEs
< 2.10.31 CVE
>= 2.10.31 CVE
1.3.0 <= v < 2.8.41 CVE
1.3.0 <= v <= 2.8.31 CVE
2.10.0 <= v <= 2.10.11 CVE
2.6.0 <= v < 2.10.21 CVE
2.6.0 <= v < 2.8.41 CVE
2.9.0 <= v <= 2.9.11 CVE

Fixed in

2.10.22 CVEs
2.8.42 CVEs
2.9.22 CVEs
8ce8017366bc1106b75c20864f200ad84f6495152 CVEs
9ce71d29b791b6a3ee7397038a85d8afc3a250fd2 CVEs
f9ce27b87f3f95d1d4533cef143e360be0c4a8292 CVEs
> 2.10.11 CVE
> 2.8.31 CVE
> 2.9.11 CVE
2.10.31 CVE
4aeafc237b8d9a8d62e45735131e8a89eb741a001 CVE

Find a version

3 CVEs

Sort

Tempo TraceQL query with exemplar hint could result in unbounded memory usage
CVE-2026-27878
Patch
CWE-400
Medium · CVSS 6.5
EPSS 0.2% (14th pct)2026-06-19
Tempo query limit results in unbounded memory allocation
CVE-2026-21728
Patch
CWE-400
High · CVSS 7.5
EPSS 0.6% (47th pct)2026-04-24
S3 SSE-C Encryption Key Exposed in Plaintext via Config Endpoint (CVE-2025-41118 Pattern)
CVE-2026-28377
Patch
CWE-326
High · CVSS 7.5
EPSS 0.2% (5th pct)2026-03-26

Grafana tempo Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Specific versions

Version ranges

Fixed in

Common weakness types

Other Grafana products

Frequently asked questions

References

Track Grafana tempo vulnerabilities